Lucene search
+L

14 matches found

SUSE CVE
SUSE CVE
•added 2026/10/15 11:42 p.m.•30 views

SUSE CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.4CVSS6.1AI score0.00373EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/10/15 12:31 a.m.•18 views

EUVD-2026-101720

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/10/15 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-110837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channe...

7.1CVSS5.8AI score0.00373EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2026/10/15 12:00 a.m.•15 views

UBUNTU-CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2026/10/14 11:17 p.m.•20 views

DEBIAN-CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

6.1CVSS6.1AI score0.00373EPSS
SaveExploits1References1
NVD
NVD
•added 2026/10/14 11:17 p.m.•21 views

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS0.00373EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/10/14 11:17 p.m.•13 views

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/10/14 10:52 p.m.•18 views

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1
CVE
CVE
•added 2026/10/14 10:52 p.m.•38 views

CVE-2026-110837

The software FreeRDP 2.0.0 before 3.32.0 contains a heap-based buffer overflow in the freerdp_dsp_decode_mp3 function. This vulnerability specifically affects versions built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF. The root cause is that the right-channel PCM pointer is offset by a byte count t...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2026/10/14 10:52 p.m.•16 views

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/10/14 10:52 p.m.•23 views

CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

6.1CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/10/14 10:52 p.m.•11 views

CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/10/14 10:52 p.m.•49 views

CVE-2026-110837 FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS0.00373EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•11 views

CVE-2026-110837: Heap-based Buffer Overflow

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1References5
Rows per page
Query Builder